Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
PHPPost 1.0 - 'profile.php?user' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Post (PHPp) 1.0 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tru-Zone Nuke ET 3.x - Search Module SQL Injection
SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Advanced Poll 2.0.2/2.0.3 - 'popup.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows remote attackers to inje
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Struts 1.2.7 - Error Response Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MailEnable 1.54 Pro - Universal IMAPD W3C Logging Buffer Overflow (Metasploit)
Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Google Search Appliance - proxystylesheet XSLT Java Code Execution (Metasploit)
The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Macromedia Flash Plugin 7.0.19.0 - 'action' Denial of Service
Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) al
28RISCO
abrir ↗Metasploit200
Novell NetMail IMAP STATUS Buffer Overflow
Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Qualcomm WorldMail Server 3.0 - Directory Traversal
Directory traversal vulnerability in Qualcomm WorldMail IMAP Server allows remote attackers to read arbitrary email mess
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Revize CMS - 'Revize.XML' Information Disclosure
Idetix Software Systems Revize CMS stores conf/revize.xml under the web document root with insufficient access control,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Revize CMS HTTPTranslatorServlet - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
freeFTPd 1.0.8 - 'USER' Remote Buffer Overflow
Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
freeFTPd 1.0.8 - 'USER' Remote Buffer Overflow
Multiple buffer overflows in freeFTPd 1.0.8, without logging enabled, allow remote authenticated attackers to cause a de
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VP-ASP Shopping Cart - 'Shopadmin.asp' HTML Injection
Cross-site scripting (XSS) vulnerability in shopadmin.asp in VP-ASP Shopping Cart 5.50 allows remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Litespeed 2.1.5 - 'ConfMgr.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Revize CMS - 'Query_results.jsp' SQL Injection
SQL injection vulnerability in debug/query_results.jsp in Idetix Software Systems Revize CMS allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPWebThings 1.4 - 'msg'/'forum' SQL Injection
Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FTGate4 Groupware Mail Server 4.1 - imapd Remote Buffer Overflow (PoC)
Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to
23RISCO
abrir ↗Metasploit200
freeFTPd 1.0 Username Overflow
Stack-based buffer overflow in freeFTPd before 1.0.9 with Logging enabled, allows remote attackers to cause a denial of
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPWebThings 1.4 - 'forum' SQL Injection
Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 7.8 Search Module - SQL Injection
Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPWebThings 1.4 - 'forum' SQL Injection
SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pearl Forums 2.0 - 'index.php' Local File Inclusion
Unspecified vulnerability in index.php in PEARLINGER Pearl Forums 2.4 allows remote attackers to include arbitrary files
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPWCMS 1.2.5 -DEV - 'login.php?form_lang' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in phpwcms 1.2.5 allow remote attackers to read arbitrary files via a .. (d
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pearl Forums 2.0 - 'index.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in PEARLINGER Pearl Forums 2.4 allow remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Walla TeleSite 3.0 - 'ts.exe?sug' SQL Injection
SQL injection vulnerability in ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to inject a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPWCMS 1.2.5 -DEV - 'imgdir' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in phpwcms 1.2.5 allow remote attackers to read arbitrary files via a .. (d
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Walla TeleSite 3.0 - 'ts.cgi' File Existence Enumeration
ts.exe (aka ts.cgi) in Walla TeleSite 3.0 and earlier allows remote attackers to access arbitrary local files via the qu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Walla TeleSite 3.0 - 'ts.exe?tsurl' Arbitrary Article Access
ts.exe in Walla TeleSite 3.0 and earlier allows remote attackers to access privileged information by entering the articl
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ekinboard 1.0.3 - 'profile.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerabilities in Ekinboard 1.0.3 allow remote attackers to inject arbitrary web script or H
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.